內網離線環境下,安裝docker.二進制來的仍是快點,或者內網搭建yum的epel倉庫!linux
環境:docker
centos7.xvim
docker-18.9.0 x86_64 static //二進制centos
一、download:bash
https://download.docker.com/linux/static/stable/x86_64/tcp
二、kernel ackui
[root@lab-210 ~]# uname -r //kerner3.10.+ centois7.x 內核都是3.10+,此舉只是爲了驗證
3.10.0-862.el7.x86_64this
三、setupcentos7
docker-18.06.1-ce.tgzspa
tar zxf docker-18.06.1-ce.tgz && mv docker/* /usr/bin/ && rm -rf docker*.tgz //解壓切移動binary到 /usr/bin
注意:若是移動到別的目錄有點問題,systemctl腳本啓動不起來,具體緣由還在尋找中
四、systemd docker.service
vim /etc/systemd/system/docker.service
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target
[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix://var/run/docker.sock
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
# restart the docker process if it exits prematurely
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s
[Install]
WantedBy=multi-user.target
五、grant privilege
chmod +x /etc/systemd/system/docker.service
systemctl daemon-reload //重載systemd下 xxx.service文件
systemctl start docker //啓動Docker
systemctl enable docker.service //設置開機自啓
六、testing docker
systemctl status docker //查看Docker狀態
docker -v //查看Docker版本
附錄centos7.x安裝腳本 install.sh
#!/bin/bash set -x #var unamer=`uname -r |cut -d'.' -f1-2` #kernel 3.10+ if [[ $unamer -lt 3.10 ]];then echo "the linux kernel too lower" && exit 8 fi #setup tar zxf docker-18.06.1-ce.tgz && mv docker/* /usr/bin/ && rm -rf docker* #systemd config cat >/etc/systemd/system/docker.service <<-EOF [Unit] Description=Docker Application Container Engine Documentation=https://docs.docker.com After=network-online.target firewalld.service Wants=network-online.target [Service] Type=notify # the default is not to use systemd for cgroups because the delegate issues still # exists and systemd currently does not support the cgroup feature set required # for containers run by docker ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix://var/run/docker.sock ExecReload=/bin/kill -s HUP $MAINPID # Having non-zero Limit*s causes performance problems due to accounting overhead # in the kernel. We recommend using cgroups to do container-local accounting. LimitNOFILE=infinity LimitNPROC=infinity LimitCORE=infinity # Uncomment TasksMax if your systemd version supports it. # Only systemd 226 and above support this version. #TasksMax=infinity TimeoutStartSec=0 # set delegate yes so that systemd does not reset the cgroups of docker containers Delegate=yes # kill only the docker process, not all processes in the cgroup KillMode=process # restart the docker process if it exits prematurely Restart=on-failure StartLimitBurst=3 StartLimitInterval=60s [Install] WantedBy=multi-user.target EOF #start chmod +x /etc/systemd/system/docker.service systemctl daemon-reload && systemctl start docker && systemctl enable docker.service #testing systemctl status docker && docker -v